diff --git a/drivers/char/broadcom/vc_sm/vmcs_sm.c b/drivers/char/broadcom/vc_sm/vmcs_sm.c index 53843054d7617..abd770566ed30 100644 --- a/drivers/char/broadcom/vc_sm/vmcs_sm.c +++ b/drivers/char/broadcom/vc_sm/vmcs_sm.c @@ -276,7 +276,10 @@ static unsigned int vmcs_sm_vc_handle_from_pid_and_address(unsigned int pid, /* Lookup the resource. */ if (!list_empty(&sm_state->map_list)) { list_for_each_entry(map, &sm_state->map_list, map_list) { - if (map->res_pid != pid || map->res_addr != addr) + if (map->res_pid != pid) + continue; + if (!(map->res_addr <= addr && + addr < map->res_addr + map->resource->res_size)) continue; pr_debug("[%s]: global map %p (pid %u, addr %lx) -> vc-hdl %x (usr-hdl %x)\n", @@ -326,7 +329,10 @@ static unsigned int vmcs_sm_usr_handle_from_pid_and_address(unsigned int pid, /* Lookup the resource. */ if (!list_empty(&sm_state->map_list)) { list_for_each_entry(map, &sm_state->map_list, map_list) { - if (map->res_pid != pid || map->res_addr != addr) + if (map->res_pid != pid) + continue; + if (!(map->res_addr <= addr && + addr < map->res_addr + map->resource->res_size)) continue; pr_debug("[%s]: global map %p (pid %u, addr %lx) -> usr-hdl %x (vc-hdl %x)\n",